drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Linux Linux)

CVE-2026-53313
MEDIUM 5.5

En bref

Source
NVD
EPSS
EPSS 0.11 % · centile 2 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths In dc_dmub_srv_log_diagnostic_data() and dc_dmub_srv_enable_dpia_trace(). Both functions check: if (!dc_dmub_srv || !dc_dmub_srv->dmub) and then call DC_LOG_ERROR() inside that block. DC_LOG_ERROR() uses dc_dmub_srv->ctx internally. So if dc_dmub_srv is NULL, the logging itself can dereference a NULL pointer and cause a crash. Fix this by splitting the checks. First check if dc_dmub_srv is NULL and return immediately. Then check dc_dmub_srv->dmub and log the error only when dc_dmub_srv is valid. Fixes the below: ../display/dc/dc_dmub_srv.c:962 dc_dmub_srv_log_diagnostic_data() error: we previously assumed 'dc_dmub_srv' could be null (see line 961) ../display/dc/dc_dmub_srv.c:1167 dc_dmub_srv_enable_dpia_trace() error: we previously assumed 'dc_dmub_srv' could be null (see line 1166)

Faiblesses (CWE)

  • CWE-476 — Déréférencement de pointeur nul

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected 2631ac1ac328189031d1aefbbd4929050f72fb23 < 2afedb8b9262df2a09e62ee7c22530a8c9df5934 ; affected 2631ac1ac328189031d1aefbbd4929050f72fb23 < 1cad9afbb2d559b738b83c498f9c1abdfd327e7f ; affected 2631ac1ac328189031d1aefbbd4929050f72fb23 < a71fdbd6e8289e2725d33a9873833459f3b1824f ; affected 2631ac1ac328189031d1aefbbd4929050f72fb23 < 2ab18de5ebb11c76bfc8087c5a09fbcccd0dea8a ; affected 2631ac1ac328189031d1aefbbd4929050f72fb23 < b37a978e6d8c33fbfa4abc5dcca4c7cfc6d01f22 ; affected 2631ac1ac328189031d1aefbbd4929050f72fb23 < 4ae3e16f4b3bf64140f773629b765d605ee079a9
Linux · Linuxaffected 5.14 ; unaffected 0 < 5.14 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.109 ≤ 6.12.* ; unaffected 6.18.50 ≤ 6.18.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD